Owners of certain LG monitors are discovering an unwelcome surprise after plugging in their displays: Windows automatically installs a full-trust app that pushes McAfee antivirus ads at every startup, without a single permission prompt. The behavior, documented by Gamers Nexus and confirmed by widespread user reports, exposes a little-known Windows feature that lets hardware vendors silently deliver companion software — and, in this case, aggressive advertising.

The Unwanted App: How It Arrives and What It Does

The culprit is called LG Monitor App Installer, and it arrives through a chain of automatic events that begins the moment Windows recognizes the monitor’s hardware identifier. You don't click a download button, agree to a license, or even see a notification. Instead, Windows Update pulls down device metadata, and the Microsoft Store quietly fetches and installs the application package. It’s a process Microsoft designed for genuine driver and utility convenience — but here, it’s been exploited for promotion.

Once installed, the app declares itself a startup program. That means every time you sign into Windows, it launches in the background. In testing by Gamers Nexus with an LG UltraGear 34GX900A-B monitor, the app displayed a pop-up advertising a 30-day free trial of McAfee on 31 out of 32 consecutive boots. On the remaining startup, it pushed an LG monitor utility. The near-constant repetition turns a peripheral connection into an advertising billboard.

The app’s Microsoft Store listing states it requires “Access your internet connection” and “All system resources” — the latter corresponding to the runFullTrust restricted capability. That doesn’t mean it has administrator privileges, but it does grant desktop-application-level access to the file system, registry, network, and user data, far beyond a sandboxed Store app. This broad access, combined with silent installation, rightly alarms users.

Which LG Monitors Are Affected?

Gamers Nexus reproduced the behavior on the LG UltraGear 34GX900A-B. They also saw the same pop-up when connecting an older LG UltraFine 32UN880-B that had been in use for three years. Unofficial complaints on forums date back to at least 2024, suggesting that LG has been pushing this installer — possibly with evolving promotional content — across multiple monitor families for some time.

There is no official, comprehensive list of affected models. The trigger appears to be the monitor’s hardware identifier, which Windows uses to match against Microsoft’s device metadata service. This means:
- Different monitor revisions may or may not trigger the download.
- A monitor purchased years ago could suddenly begin causing the adware after LG updates its server-side associations.
- Not every LG monitor will necessarily auto-install the app, but UltraGear and UltraFine lines are implicated.

Users should check their own systems rather than assuming safety based on a model name alone.

What This Means for You

For Everyday Users

First, the annoyance: a pop-up advertising antivirus software that appears immediately after boot. Many users may mistake it for a legitimate system warning, especially since it arrives through Microsoft-sanctioned channels. If you click through and start the McAfee trial, it can convert into a paid subscription, and it may also alter Windows’ built-in Defender antivirus operation by taking over real-time protection.

Second, trust erodes. A monitor is a passive display device — it shouldn’t install advertising software. This behavior feels reminiscent of bloatware on new PCs, but it’s worse: you didn’t buy a new PC; you just plugged in a screen.

Performance impact is minor on modern hardware, but every startup component adds overhead. Over time, accumulated “helpful” utilities slow boot and clutter the background.

For Power Users and IT Administrators

For professionals, the concerns scale up:
- Compliance violations: An unauthorized app with full trust and network access on a managed endpoint can raise red flags in audits.
- Security false positives: Endpoint detection tools may flag the app’s behavior, generating alerts.
- Licensing confusion: If a user inadvertently activates a McAfee subscription through a domain-joined machine, it creates licensing and billing headaches.
- Peripheral governance gap: IT departments often scrutinize USB drives and network adapters, but monitors are generally considered benign. This incident shows that any USB-connected device with a unique hardware ID can trigger a cloud-driven software deployment.

Enterprise administrators can take preventive measures (see “What to Do Now” below), but the incident highlights the need to revise peripheral acceptance policies.

How We Got Here: Windows’ Automatic Device-App Installation

Windows has long been able to automatically configure new hardware. The original idea was to eliminate driver CDs and manual setup. Over time, however, the system evolved to fetch not just drivers but entire companion applications from the Microsoft Store — a convenient upgrade for printers, cameras, and audio devices that genuinely benefit from control panels.

Here’s the typical flow for a device like a modern monitor:
1. Windows identifies the hardware and retrieves its metadata.
2. Windows Update installs any driver packages or software components.
3. The metadata links the device to a Store application.
4. The Store installs that application for the signed-in user, often without a prompt.

Microsoft’s documentation acknowledges that automatic installation may occur without notification, prioritizing frictionless setup over explicit consent. The feature works well when the companion app is essential — like a printer’s scanning utility. It backfires when the app’s purpose extends to marketing.

LG is not the first to push the boundary, but the combination of silent install, full-trust access, and repeated advertising is particularly brazen. It also fits a broader pattern: LG’s smart TVs already embed AI services and hidden recording disclaimers in their terms of service. The monitor installer feels like an extension of that philosophy — exploit a trust relationship for recurring revenue.

What to Do Now: Check, Remove, and Prevent

Check Your System

  • Open Settings > Apps > Installed apps and search for “LG Monitor App Installer.”
  • Look at the installation date to see if it arrived recently, though be aware Store updates can sometimes reset this timestamp.
  • Open Task Manager > Startup or Settings > Apps > Startup and see if the app is registered to launch at sign-in.

Remove the Adware

Uninstalling the app will stop the pop-ups and does not affect the monitor’s basic display functions. The monitor will still work via standard Windows and graphics drivers; you’ll only lose any optional LG utilities that you might have wanted (like OnScreen Control).

  1. In Settings > Apps > Installed apps, find LG Monitor App Installer.
  2. Click the three-dot menu and select Uninstall.
  3. Restart and verify the pop-up is gone.
  4. Double-check Startup apps for any leftover LG entries. You can keep intentionally installed tools like LG Switch or Dual Controller if you use them.

Advanced users can also use Reliability Monitor (search from Start) to trace back the exact moment the app first appeared, confirming it was triggered by connecting the monitor.

Prevent Future Auto-Installs

Windows Professional, Enterprise, and Education editions include a Group Policy setting that stops the automatic download of apps associated with device metadata. This won’t block essential drivers, but it will prevent the surprise arrival of companion software.

  1. Press Win + R, type gpedit.msc, and press Enter.
  2. Navigate to Computer Configuration > Administrative Templates > System > Device Installation.
  3. Find Prevent automatic download of applications associated with device metadata and set it to Enabled.
  4. Click OK and reboot.

Note: This policy may also block legitimate companion apps for printers, cameras, and other peripherals. You can still install those manually from the Microsoft Store or vendor websites. On unmanaged home PCs running Windows Home edition, Group Policy Editor is not available, so manual vigilance is the main defense.

What’s Next: Demanding Accountability

Neither LG nor Microsoft has issued a detailed explanation as of this writing. LG owes users a clear statement: which models trigger the installer, when the McAfee promotion was added, and whether promotional frequency is controlled locally or remotely. The company should also separate essential monitor tools from optional third-party offers and ensure users are asked before either is installed.

Microsoft must revisit its auto-installation permissions. A consent prompt — even a simple one showing the app name, publisher, and a description — would restore trust. The company could also create a policy that blocks apps containing third-party offers from automatic deployment, or require that such apps cannot register for startup without explicit user approval.

This isn’t a call to abandon automatic driver and utility delivery. Done right, Windows Update and the Store make device setup seamless and secure. But convenience must not become a loophole for unwanted advertising. A monitor you buy should remain a tool you own, not a marketing channel you unknowingly rented.

The next version of Windows should prove that Microsoft understands the difference.